vocenda[.]app

Vocenda.app is a newly detected phishing domain that capitalizes on the early detection gap before antivirus databases update. Currently, it registers zero detections on VirusTotal, highlighting its freshness and the urgency of early identification. The domain is already flagged by PhishDestroy, MetaMask, and SEAL, indicating its malicious intent.

Registered with CloudFlare, Inc., and hosted on an IP associated with Amazon.com, Inc. in Germany, vocenda.app uses Amazon's SSL certification, which might be an attempt to lend legitimacy to its operations. The page title, "Vocenda — Understand by explaining," suggests a deceptive front, possibly aiming to lure users into a false sense of security.

The domain's presence on three public blocklists underscores its threat level. PhishDestroy's early detection pipeline identifies such domains during the critical 24-72 hour window post-registration, when they are most likely to evade traditional security measures. This proactive approach helps mitigate potential damage by alerting relevant parties before the domain gains traction in phishing campaigns.